Check an IP Address, Domain Name, Subnet, or ASN

101.235.198.2 was found in our database!

$ whois 101.235.198.2

country·🇰🇷 South Korea

isp·HCN Dongjak

asn·AS7562

network·Standard

$ sikker risk 101.235.198.2scoring →

confidence

81%Very High

first_seen·Jan 21, 2026

last_seen·4d ago

sessions·9

events·253

$ sikker protocols 101.235.198.2

TELNET

9 / 253

$ sikker summary 101.235.198.2

101.235.198.2 has a threat confidence score of 81%. This IP address from South Korea (AS7562, HCN Dongjak) has been observed in 9 honeypot sessions targeting TELNET protocols. First observed on January 21, 2026, most recently active March 21, 2026.

$ sikker primitives 101.235.198.2

telnet_command_cd66 telnet_busybox_echo_redirect_file_create66 telnet_shell_execute_writable_hidden_file66 telnet_busybox_binary_invocation34 telnet_command_sh15 dismissed_primitive.11 telnet_command_ping6 telnet_command_shell6 telnet_command_enable6 telnet_command_system6 telnet_command_linuxshell6 telnet_command_iptables_flush6 telnet_rm_recursive_hidden_relative_cleanup6 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 101.235.198.2

🇰🇷·More threats fromSouth Korea→AS·More threats fromHCN Dongjak→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
58.141.130.78	72%	4
49.142.79.72	85%	381
59.187.234.124	62%	4
101.235.199.67	79%	13
118.91.2.191	69%	5

IP Address	Confidence	Events
220.92.117.221	89%	3,754
43.155.182.126	96%	2,483
61.76.24.115	86%	835
14.63.198.239	100%	968
183.110.216.135	97%	5,327